Blockaid CEO Ido Ben-Natan has warned that the recent Coldcard exploit underscores systemic weaknesses in cryptocurrency security, with attackers reportedly exploiting a flaw in hardware wallet seed generation. The incident, which allegedly allowed reconstruction of private keys, has led to confirmed losses of $111 million and predicted total losses exceeding $130 million, according to Galaxy Research.
The exploit reportedly stemmed from reduced randomness in how Coldcard devices generated wallet seeds, a vulnerability that could enable attackers to deduce private keys. K33, a security firm, said to have estimated that over 7,000 addresses were targeted in the breach, raising concerns about the scalability of current cryptographic safeguards.
Blockaid’s analysis of H1 2026 data revealed that 75% of crypto exploit losses in the period were attributed to private-key compromises, marking the half-year as the “most-hacked on record” with over $1 billion in total losses. Ben-Natan argued that reliance on passwords and private keys creates a single point of failure, leaving users exposed to evolving threats.
The CEO highlighted the growing role of AI in enabling more sophisticated hacking techniques, stating that “very soon everyone in the world is gonna have one of the best hackers in the world at their fingertips.” He stressed that passive storage of assets, without active security measures, is no longer sufficient to protect against rapidly advancing threats.
The incident has reignited debates over the adequacy of current cryptographic models, with experts urging a reevaluation of how access to digital assets is governed. As the industry grapples with these vulnerabilities, the need for adaptive security frameworks remains urgent.
Written by Daniel Brooks
Security Desk
